Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: fDRake3QPoY1Vp/y6jFlIg9cHaZfjjNuaqDuH94r110=
Subject key identifier: DE:65:51:8C:4C:BE:6A:F3:57:25:12:09:A6:86:76:6E:C1:E1:F3:0E
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 019F9512553D38FF04EACB5F6D69931DEA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 18C7
Signing time: Fri 24 Jul 2026 17:00:34 +0000
Manifest this update: Fri 24 Jul 2026 17:00:34 +0000
Manifest next update: Sat 25 Jul 2026 17:00:34 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: IhcDx5F7+4ikDo7pWYvXp9423ICFM1bOVOI4U40Z9Mo=)
2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:55:3d:38:ff:04:ea:cb:5f:6d:69:93:1d:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Jul 24 17:00:34 2026 GMT
Not After : Jul 25 17:00:34 2026 GMT
Subject: CN=de65518c4cbe6af357251209a686766ec1e1f30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:b2:7d:64:82:5d:88:28:fa:3e:fd:5c:35:
d9:9e:95:1e:9f:61:f1:d1:7c:6f:1d:bc:41:23:c7:
0b:ec:31:70:dc:ea:bc:d3:3e:be:39:42:63:79:fa:
4b:7e:f4:f8:21:ab:4c:67:01:e3:08:86:e5:74:6c:
15:fd:73:18:ec:99:4e:3c:a0:36:13:1c:a9:21:79:
cf:fc:d8:d1:3b:bf:82:a6:6e:c8:b1:11:03:00:f5:
a2:ee:93:6b:ed:4b:d7:ce:be:02:89:f1:f8:da:0c:
05:83:6b:c2:3e:5a:eb:9c:48:bf:74:a4:ff:ee:ae:
c1:cd:f9:5e:c1:ea:6d:0b:19:5d:be:cf:a6:fe:22:
dc:2b:dd:87:49:b9:bc:56:c9:63:07:69:9f:56:a0:
44:45:7b:ea:30:7c:56:8a:ae:7e:df:2f:35:f8:4b:
fd:9b:f3:f1:d6:f3:55:ab:59:32:74:af:98:6d:7a:
ad:49:cb:a3:40:9c:29:86:63:1f:d4:30:f0:5b:8d:
fe:d3:b4:e6:32:11:c2:88:27:24:f4:f2:16:34:e7:
2d:74:5b:23:cd:2c:80:28:18:b1:3a:8c:18:c8:da:
9b:73:8b:ec:41:f9:77:1d:36:6d:e6:5c:3c:dd:64:
2a:49:da:be:5b:11:2c:a2:ee:62:ca:45:bf:67:3d:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:51:8C:4C:BE:6A:F3:57:25:12:09:A6:86:76:6E:C1:E1:F3:0E
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:b8:05:95:9a:b2:49:28:09:73:be:05:aa:da:4f:cf:c4:
45:f2:f9:2d:e4:24:f9:86:d3:20:80:7e:a7:6d:bc:3f:8c:38:
90:06:65:b2:a4:91:ac:c6:2c:b8:17:35:c7:32:ca:2f:1d:95:
44:99:e4:86:11:18:b8:1b:b7:91:51:d4:1b:4b:1e:ec:20:e2:
c9:6c:91:7a:b7:22:f0:af:15:09:3d:e1:08:12:68:87:0a:76:
cc:05:0a:9b:8a:50:4c:96:4d:b7:ee:56:12:f4:82:e7:c9:68:
ff:55:d5:59:44:04:49:f8:b7:2b:86:41:4c:e8:d3:2b:d6:7b:
d8:5e:96:f8:a6:06:e3:71:23:2f:e4:d1:60:96:23:5d:e1:6a:
61:4b:93:5c:85:2f:7c:16:cb:8b:25:b6:f2:06:f3:b6:e0:ab:
eb:10:bc:eb:2c:42:c5:ff:e2:34:d5:4d:26:3c:78:d7:a3:f7:
40:5f:11:b7:bd:a8:b9:7a:07:eb:b2:76:bc:c9:32:26:8e:fe:
3b:37:a1:3d:4b:a4:47:73:96:5e:6d:16:71:9a:37:a3:2d:c1:
64:d3:e3:03:9c:fd:19:8f:84:8e:19:1c:d6:88:9c:bf:14:95:
5c:93:92:46:7b:d4:c8:84:27:53:66:ba:26:b7:4a:e1:28:67:
75:4a:8d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VElU9OP8E6stfbWmTHeqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjYwNzI0MTcwMDM0WhcNMjYwNzI1MTcwMDM0WjAzMTEwLwYDVQQD
EyhkZTY1NTE4YzRjYmU2YWYzNTcyNTEyMDlhNjg2NzY2ZWMxZTFmMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk+yfWSCXYgo+j79XDXZnpUen2Hx
0XxvHbxBI8cL7DFw3Oq80z6+OUJjefpLfvT4IatMZwHjCIbldGwV/XMY7JlOPKA2
ExypIXnP/NjRO7+Cpm7IsREDAPWi7pNr7UvXzr4CifH42gwFg2vCPlrrnEi/dKT/
7q7BzfleweptCxldvs+m/iLcK92HSbm8VsljB2mfVqBERXvqMHxWiq5+3y81+Ev9
m/Px1vNVq1kydK+YbXqtScujQJwphmMf1DDwW43+07TmMhHCiCck9PIWNOctdFsj
zSyAKBixOowYyNqbc4vsQfl3HTZt5lw83WQqSdq+WxEsou5iykW/Zz2IiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5lUYxMvmrzVyUSCaaGdm7B4fMOMB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxK4BZWa
skkoCXO+BaraT8/ERfL5LeQk+YbTIIB+p228P4w4kAZlsqSRrMYsuBc1xzLKLx2V
RJnkhhEYuBu3kVHUG0se7CDiyWyRerci8K8VCT3hCBJohwp2zAUKm4pQTJZNt+5W
EvSC58lo/1XVWUQESfi3K4ZBTOjTK9Z72F6W+KYG43EjL+TRYJYjXeFqYUuTXIUv
fBbLiyW28gbztuCr6xC86yxCxf/iNNVNJjx416P3QF8Rt72ouXoH67J2vMkyJo7+
OzehPUukR3OWXm0WcZo3oy3BZNPjA5z9GY+Ejhkc1oicvxSVXJOSRnvUyIQnU2a6
JrdK4ShndUqNpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:43 2026 by rpki-client